That kind of spread suggests that bots are leaving rave reviews but real users are very unhappy. Average ratings hover around the 3-star mark, but overall, scores are highly polarized, mostly 5s and 1s. Although the apps have different publishers, two of the fake modpacks carried almost the exact same description, down to the typos. The humblest of these had more than 500 installations, and the most popular ones have more than 1 million downloads. The Kaspersky team reached out to Google to warn them about the malicious apps on the Play Store and most of them have already been removed. If a user entered their Facebook credentials, their account credentials would then be stolen. In one case, a fake ad network app and a fake client used for advertising on TikTok were available on Google Play. Some of these fake modpacks steal social media accounts. These can also suddenly open a browser, or app pages on Google Play, and show you YouTube videos randomly. These apps can also load additional modules that can hide their icons so users will not be able to spot them on their device. Also, these applications do not need to be open to show ads, just being on the device is enough. These malicious apps were distributing adware, software that bombards users with unwanted ads and disrupts the normal use of their devices.
